Redundant key server encryption environment

Abstract

Provided are a computer program product, system and method for a redundant key server encryption environment. A key server transmits public keys associated with the key server and at least one device to at least one remote key server. The key server receives from the at least one remote key server public keys associated with the at least one remote key server. The key server receives a request for an encryption key from a requesting device comprising one of the at least one device and generates the encryption key for use by the requesting device to unlock a storage. The key server generates a first wrapped encryption key by encrypting the encryption key with a requesting device public key associated with the requesting device. The key server generates a second wrapped encryption key by encrypting the encryption key with a public key associated with the key server. At least one additional wrapped encryption key is generated for each of the at least one remote key server by encrypting the encryption key with the at least one public key provided by the at least one remote key server. The key server transmits the first, second and the at least one additional wrapped encryption key to the requesting device.

Description

BACKGROUND OF THE INVENTION[0001]1. Field of the Invention[0002]The present invention relates to a computer program product, system and method for a redundant key server encryption environment.[0003]2. Description of the Related Art[0004]In certain encryption environments, storage subsystems may request a symmetric key from a key server and then use that symmetric key to unlock a disk drive or use the symmetric key to encrypt and decrypt data to tape. Using a graphical interface or command line, the customer first configures the key server with an asymmetric key pair and an associated key label comprising text. The customer may then enter in a key label comprising text using a graphical interface or command line as input to an encryption group create operation on the storage device. In response to a request from the subsystem for the symmetric key that is part of the encryption group create command, the key server generates the encryption key and provides the storage subsystem the e...

AI Technical Summary

Problems solved by technology

An encryption deadlock situation may occur when all key servers within a computing environment are rendered inoperable because key server data is stored on an encryption storage device that is dependent on the key server to access the data (i.e., the encryption keys themselves have been included within the data that was encrypted using those keys).

If an encryption deadlock occurs, then the key servers may not be able to complete their initial program load (IPL) and become operational or may not be able to provide key services to storage subsystems.

While an encryption deadlock exists, the customer is unable to access any encrypted data on the encrypted storage.

If the possible key server instances are in encryption deadlock, then the customer cannot obtain the keys needed to decrypt attached storage, and the encryption deadlock can become a permanent encryption deadlock such that all encrypted data managed by the key servers is permanently lost, which can have substantially detrimental effects to the business whose data is now inaccessible.

Images